snovvcrash

cloc

cloc counts blank lines, comment lines, and physical lines of source code in many programming languages.

windows

Windows inside a Docker container.

SSH-Snake

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

Stardust

A modern 64-bit position independent implant template

Uguu

Uguu is a simple lightweight temporary file host with support for drop, paste, click and API uploading.

Python-Backdoor

This project is a cross-platform backdoor/reverse shell and post-exploitation tool written in Python3

MultiDump

MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.

cve-maker

Tool to find CVEs and Exploits.

DNSlivery

Easy files and payloads delivery over DNS

Malleable-CS-Profiles

A list of python tools to help create an OPSEC-safe Cobalt Strike profile.

AtlasLdr

Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls

BitMono

Obfuscator for .NET and Mono, with a customizable engine for building your own obfuscators.

Proxy-DLL-Loads

A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.

Jomungand

Shellcode Loader with memory evasion

InflativeLoading

Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

Mistica

An open source swiss army knife for arbitrary communication over application protocols

nysm

nysm is a stealth post-exploitation container.

Parasite-Invoke

Hide your P/Invoke signatures through other people's signed assemblies

C-To-Shellcode-Examples

BOF2shellcode

POC tool to convert CobaltStrike BOF files to raw shellcode

DirtyCLR

An App Domain Manager Injection DLL PoC on steroids

SingleDose

Generate Shellcode Loaders & Injects

WTSRM2

LogonCredentialsSteal

LOCAL AND REMOTE HOOK msv1_0!SpAcceptCredentials from LSASS.exe and DUMP DOMAIN/LOGIN/PASSWORD IN CLEARTEXT to text file.

Embedder

Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies

bbs

bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or chains of proxies based on the request's target. Routing can be configured with a PAC script (if built with PAC support), or through a JSON file.

FuncAddressPro

A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.

HIPS_LIPS

Community maintained list of most popular HIPS service and process names on a Windows Platform.

PyKD

PyKD DLLs for x86 and x64 platforms

wsnet-dotnet